[AMQCPP-619] Support for SSL wilcard certificate

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.9.4
• Fix Version/s: 3.10.0
• Patch Info: Patch Available
• Flags: Patch
• Assignee: Jamie Mark Goodyear
• Reporter: Francois Godin
• Created: 16/Aug/17 14:46
• Updated: 07/Dec/18 18:20
• Resolved: 07/Dec/18 18:20

Description

SSL certificate can contain wildcard in the hostname. For example, the certificate URL "*.proxy.app.com" should match the following address:

• 1.proxy.app.com
• 2.proxy.app.com

Sadly, ActiveMQ-CPP simply compare the two values and thus does not accept such certificates.

The Openssl page https://wiki.openssl.org/index.php/Hostname_validation describe some possible implementation.